Agent Governance Foundation

AI agent governance,
ready to deploy.

Stop shipping agents without a governance layer. AGF provides delegation chains, trust scoring, branch-cut revocation, and signed audit artifacts — in a single managed API.

Start free sandboxRead the docsTry the interactive demo

< 10ms

Authorization decisions

< 500ms

Branch-cut propagation

100%

Decision audit coverage

27

Open specifications published

The all-in-one governance layer

Agent authorization,
and a whole lot more.

One managed service — six governance capabilities. Your agents call our API; we evaluate identity, trust, policy, and context in under 10ms.

Explore all features

Delegation chains

Cryptographically signed ES256 tokens track every hop — verifiable offline, no round-trip required.

Trust scoring

Lineage, credential, and anomaly scores combined per session. Trust degrades as risk signals accumulate.

Risk evaluation

Three-layer context-aware decisions: time, location, amount, and environmental signals in one policy call.

Branch-cut revocation

Revoke one compromised agent and every downstream agent it authorized is cut off in under 500ms.

Audit artifacts

Signed, tamper-proof records of every policy decision. Replayable and suitable for compliance evidence.

Compliance reports

Pre-built mappings for NIST AI RMF, ISO 42001, and the EU AI Act. Enterprise includes audit assistance.

Developer-first design

A unified platform
with modern APIs.

AGF provides a single REST API that eliminates the need to build and maintain identity, trust, and revocation infrastructure. Ship governance in an afternoon, not a quarter.

  • Single POST returns allow/deny in < 10ms
  • ES256 delegation tokens — verifiable offline
  • OpenAPI spec · SDKs · Webhook events
Read the quick start
RequestPOST /v1/decide
{
  "chain"    : ["did:agf:agt_7k2mxP"],
  "action"   : {
    "type"     : "payments.transfer",
    "resource" : "account:acct_9wQr"
  },
  "audience" : "api.acme.internal",
  "context"  : { "amount_usd": 4800 }
}
Response200 OK · 7ms
{ "data": {
  "decision"      : "allow",
  "artifact_id"   : "art_3hNmK2",
  "trust_score"   : 87,
  "risk_score"    : 12,
  "policy_version": "v4"
}}

Delegation chains

Track every authorization
hop — cryptographically.

When a human authorizes an orchestrator, which authorizes a payment agent, which calls an API gateway — every hop is signed with ES256. The chain is verifiable offline with no round-trip required.

  • Cryptographic proof at each delegation hop
  • Scoped tokens — child can never exceed parent authority
  • Verifiable offline — no AGF round-trip needed
Learn about agent identity
Delegation chainAll signatures valid

Human Principal

corp\ramesh.k

owner
ES256 · scoped · signed

Orchestrator Agent

agt_7k2mxP

delegated
ES256 · scoped · signed

Payment Agent

agt_9wQr4m

sub-delegated
ES256 · scoped · signed

API Gateway

agt_2hKp8v

read-only
chain depth: 3 hopsparent revokes child
Branch-cut · propagatingRevocation active
Orchestratoragt_7k2mxPPaymentagt_9wQrReportsagt_4pLrAPI GWagt_2hKNotifieragt_8vRDB Writeragt_5nM
6 agents revoked · propagated in 312ms

Branch-cut revocation

Revoke one,
stop all. No sweat.

The moment a compromise is detected, one API call cuts the agent and every downstream agent it authorized — instantly. No manual tracking. No cascading clean-up scripts. Propagation in under 500ms.

  • Single call revokes the full downstream branch
  • Fleet revocation for organization-wide incidents
  • Revocation events delivered via webhook
Learn about revocation

Audit artifacts

Every decision,
signed and stored.

Every allow/deny produces a tamper-proof artifact signed with ES256. Replayable for incident investigation. Pre-mapped to NIST AI RMF, ISO 42001, and the EU AI Act for compliance evidence.

  • Signed with ES256 — independently verifiable
  • Immutable store — no post-hoc modification
  • Pre-built compliance reports for NIST / ISO / EU AI Act
Explore compliance
Decision artifact · signedES256 verified
{
  "artifact_id": "art_3hNmK2pR",
  "decision"   : "allow",
  "agent_id"   : "agt_7k2mxP",
  "action"     : "payments.transfer",
  "trust_score": 0.87,
  "depth"      : 2,
  "timestamp"  : "2026-06-22T14:23:01Z",
  "signature"  : "eyJhbGciOiJFUzI1NiJ9…"
}
Tamper-proof
Replayable
NIST-mapped

Get started today

Ready to govern your agents?

We run the authorization service for you. Your agents call our API. No infrastructure to manage — governance from day one.

Start free sandbox →Contact sales
Not convinced yet? Play Agent Triage and see the gap yourself